137 matches found
CVE-2005-0963
CVE-2005-0963 concerns an error in the Toshiba ACPI BIOS 1.6 that causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, preventing boot even when the MBR is not malformed. The description notes that there is debate on whether this constitute...
CVE-2004-0963
CVE-2004-0963 is a Word parsing buffer overflow (Word 2002 SP3 and other versions) that could allow remote code execution when a user opens a specially crafted Word document. The connected advisories (MS05-023) document the vulnerability in Word 2000–2003 and provide updates/mitigations: Word Win...
Mandrake Linux Security Advisory : lftp (MDKSA-2003:116)
A buffer overflow vulnerability was discovered by Ulf Harnhammar in the lftp FTP client when connecting to a web server using HTTP or HTTPS and using the 'ls' or 'rels' command on specially prepared directory. This vulnerability exists in lftp versions 2.3.0 through 2.6.9 and is corrected upstrea...
Fedora Core 1 : lftp (2003-034)
Ulf Harnhammar found a remotely-triggerable buffer overflow in lftp. An attacker could create a carefully crafted directory on a website such that, if a user connects to that directory using the lftp client and subsequently issues a 'ls' or 'rels' command, the attacker could execute arbitrary cod...
RHEL 2.1 / 3 : lftp (RHSA-2003:404)
Updated lftp packages are now available that fix a buffer overflow security vulnerability. lftp is a command-line file transfer program supporting FTP and HTTP protocols. Ulf Harnhammar discovered a buffer overflow bug in versions of lftp up to and including 2.6.9. An attacker could create a...
CVE-2003-0963
Buffer overflows in 1 trynetscapeproxy and 2 trysquideplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands...
CVE-2003-0963
CVE-2003-0963 covers a buffer overflow in lftp up to version 2.6.9 (and earlier) triggered by long directory names processed by the ls or rels commands when contacting remote HTTP servers. Public advisories (e.g., Debian DSA-406, Mandrake MDKSA-2003:116) note that the flaw could allow remote code...
CVE-2003-0963
Buffer overflows in 1 trynetscapeproxy and 2 trysquideplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands...
CVE-2002-0963
SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter...
CVE-2002-0963
CVE-2002-0963 describes a SQL injection in GeekLog 1.3.5 and earlier, occurring in comment.php via the pid parameter. This could allow remote attackers to obtain sensitive user information. The NVD notes a MEDIUM risk (CVSS v2: AV:N/AC:L/Au:N/C:P/I:N/A:N; base 5.0). Affected product/version and e...
CVE-2001-0963
SpoonFTP Server (version 1.1) is affected by a directory-traversal vulnerability in the CWD command due to inadequate input validation, allowing local users (and in some cases remote users) to access files outside the FTP root with the user’s privileges. CERT/CC notes the impact as reading direct...
CVE-2001-0963
Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... modified dot dot in the CD CWD command...
CVE-2000-0963
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFODIRS...
CVE-2000-0963
The CVE-2000-0963 vulnerability is a local buffer overflow in the ncurses library that can allow execution of arbitrary commands via overly long environment variables (TERM or TERMINFO_DIRS). Connected PT-2000-1003 and other records specify affected software as ncurses versions 5.0–5.2 and ncurse...
CVE-1999-0963
The CVE-1999-0963 entry concerns FreeBSD’s mount_union utility, where a symlink attack enables local users to gain root privileges. Reported impact is local privilege escalation with full confidentiality, integrity, and availability implications as per CVSS: local access, low attack complexity, n...
